It’s Amazon Prime Day; Beware of Scams!

Shoppers beware, Amazon Prime Day, like any online event, will be exploited by cybercriminals seeking to steal your sensitive information or infect your devices with malware.  Be on the lookout for:  Any variation in Amazon’s web address, https://www.amazon.com/, in your browser’s address bar. Variations, such as amazon.co, indicate you’re in a spoofed site, in which […]

Chrome Zero Day Under Active Exploit: Update ASAP

Google has released Chrome version 91.0.4472.114 which updates 4 security flaws, including a high severity zero-day vulnerability which is being actively exploited. Users of the Google Chrome browser on Windows, Mac or Linux are advised to update asap. This version became available yesterday and will be available worldwide over the next several days.  For instructions […]

Beware of Recycling Your Phone Number

The following Princeton University study on Security and Privacy Risks of Number Recycling at Mobile Carriers in the United States details the risks associated with recycling your phone number. You may want or need to relinquish a phone number for a variety of reasons, but it’s important to consider the potential fallout and available alternatives […]

Beware of Search Engine Ads & Results Providing Links to Financial Institutions

The FBI has issued a warning about the prevalence of scams using search engine ads and search engine results which purport to link victims to their financial institution(s). Instead, these sites are taking victims to spoofed sites and login prompts, which are designed to steal their credentials.  Other specifics known about these scams are that […]

Latest Apple Mobile Device Update Introduces a New Privacy Tool

Apple has released iOS 14.5 for mobile devices, which includes a new privacy tracking tool called App Tracking Transparency, which provides more visibility and control around how your data is shared by apps you use. This tool addresses the behavior of the embedded trackers inside many of your apps that routinely gather information to target […]

4/13 Update Addresses MS Exchange Server Vulnerabilities

Please be advised that new updates, deemed urgent, were released for MS Exchange Server (2013 – 2019 versions) on April 13th, to address security vulnerabilities reported to Microsoft by the NSA. These vulnerabilities are being tracked as (CVE-2021-28480, 28481, 28482, and 28483).  As you may recall, Microsoft did an out of band update in early […]

Beware of COVID Vaccine Survey Scams

The DOJ has issued a warning about COVID-19 vaccine survey phishing scams. Scammers are seeking to steal both sensitive information and money. Scammers seek to obtain sensitive information via survey responses and engage in monetary theft by promising free gifts for completing the survey.  Credit card information is stolen when victims supply it to pay […]

Phishing Message Purporting to Originate from NYU

Please be advised of the following phishing message purporting to originate from NYU.  Phishing Indicators:  When an email asks you to take an action, such as clicking on a link or opening an attachment, evaluate the message carefully and ask yourself if you were expecting to receive it, and if not, whether you’re able to […]